TY - GEN
T1 - Towards adaptive false alarm reduction using Cloud as a Service
AU - Meng, Yuxin
AU - Li, Wenjuan
AU - Kwok, Lam For
PY - 2013
Y1 - 2013
N2 - False alarms are a challenging issue for an intrusion detection system (IDS), which can significantly decrease the effectiveness of detection and heavily increase the burden on analyzing true alarms. With the advent of cloud computing, it is a big chance to mitigate this problem in such a promising environment. In our previous work, we proposed to construct an intelligent false alarm filter by selecting an appropriate algorithm in an adaptive way, whereas the additional workload may be an issue for implementation. In this paper, we begin by presenting a Generic Cloud-based Intrusion Detection Architecture (GCIDA) and we then propose a cloud-based solution to improve the false alarm reduction and reduce the workload using Cloud as a Service (CaaS). In addition, we also describe the procedures and the interactions between the Cloud nodes and the Cloud providers. Experimental results indicate that CaaS can provide sufficient computing power and greatly reduce the workload of adaptive false alarm reduction.
AB - False alarms are a challenging issue for an intrusion detection system (IDS), which can significantly decrease the effectiveness of detection and heavily increase the burden on analyzing true alarms. With the advent of cloud computing, it is a big chance to mitigate this problem in such a promising environment. In our previous work, we proposed to construct an intelligent false alarm filter by selecting an appropriate algorithm in an adaptive way, whereas the additional workload may be an issue for implementation. In this paper, we begin by presenting a Generic Cloud-based Intrusion Detection Architecture (GCIDA) and we then propose a cloud-based solution to improve the false alarm reduction and reduce the workload using Cloud as a Service (CaaS). In addition, we also describe the procedures and the interactions between the Cloud nodes and the Cloud providers. Experimental results indicate that CaaS can provide sufficient computing power and greatly reduce the workload of adaptive false alarm reduction.
KW - Cloud as a Service
KW - Cloud Environment
KW - False Alarm Reduction
KW - Intrusion Detection
KW - Network Performance
UR - http://www.scopus.com/inward/record.url?scp=84893623401&partnerID=8YFLogxK
U2 - 10.1109/ChinaCom.2013.6694633
DO - 10.1109/ChinaCom.2013.6694633
M3 - Conference article published in proceeding or book
AN - SCOPUS:84893623401
SN - 9781479914067
T3 - 2013 8th International ICST Conference on Communications and Networking in China, CHINACOM 2013 - Proceedings
SP - 420
EP - 425
BT - 2013 8th International ICST Conference on Communications and Networking in China, CHINACOM 2013 - Proceedings
T2 - 2013 8th International ICST Conference on Communications and Networking in China, CHINACOM 2013
Y2 - 14 August 2013 through 16 August 2013
ER -